
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S4kVMCTk-e-ZE_MsH2aOaMKgyOo.roa
File: S4kVMCTk-e-ZE_MsH2aOaMKgyOo.roa (raw, json)
Hash identifier: XY57EwFU6DzyBK7XytYzpX+E33kedJNspa6VXCgoUQg=
Subject key identifier: 4B:89:15:30:24:E4:F9:EF:99:13:F3:2C:1F:66:8E:68:C2:A0:C8:EA
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: 8C
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S4kVMCTk-e-ZE_MsH2aOaMKgyOo.roa
Signing time: Sun 01 Mar 2026 01:54:49 +0000
ROA not before: Sun 01 Mar 2026 01:54:49 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 148.67.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 1 01:54:49 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=4B89153024E4F9EF9913F32C1F668E68C2A0C8EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:bb:a4:48:4a:8e:64:c8:c1:8c:84:8b:84:
39:62:4e:65:18:47:9b:f4:67:47:0b:78:da:44:34:
8c:07:64:54:51:be:13:f4:3b:69:7b:70:92:2b:8e:
f5:b4:5b:2e:0b:30:96:8d:32:f5:ac:21:4e:2c:4d:
e5:70:2c:4c:c1:f2:32:96:dd:7e:6b:b9:21:90:42:
27:92:bc:e7:f0:0e:87:df:6f:73:a0:d5:8b:a3:d2:
77:87:15:8f:06:7c:8d:10:00:62:a7:81:38:56:f8:
a8:b4:32:99:73:d4:fe:8c:53:58:b2:a7:7b:f6:a1:
79:ef:a4:31:46:94:5f:f3:cb:c2:43:cf:06:f3:48:
5c:70:87:dc:70:dd:9e:4f:90:32:cb:fb:84:c4:28:
6c:c0:46:53:c3:23:eb:25:2d:3b:80:7f:e4:63:15:
b0:4a:ae:bf:e0:aa:5c:d7:f3:f0:d9:69:9f:87:6e:
c8:a0:c2:e6:60:a0:a4:8f:50:66:bb:aa:7b:54:a9:
42:bc:42:3d:5b:ae:08:7a:fb:35:36:f7:01:84:44:
d3:be:89:72:44:2a:83:83:f2:d1:3e:39:34:8a:f5:
db:91:9d:00:d8:6c:8f:fc:ad:de:22:d0:ff:ef:3c:
3e:02:8f:af:dc:2d:0c:78:44:c1:36:14:72:1e:0e:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:15:30:24:E4:F9:EF:99:13:F3:2C:1F:66:8E:68:C2:A0:C8:EA
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S4kVMCTk-e-ZE_MsH2aOaMKgyOo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
148.67.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:b2:2a:08:54:40:88:74:f3:86:13:3b:3f:11:86:8b:06:ab:
05:00:0c:54:b3:7f:7f:7f:b5:1f:1d:dd:bf:ba:91:45:b8:5f:
e2:84:cb:e6:cb:a3:6a:7e:71:57:e6:0a:bc:54:22:d8:f4:df:
13:2a:d7:4e:a9:35:ba:b1:a6:c8:26:62:b0:df:50:78:79:a0:
d1:a5:4c:dc:85:2f:e6:9c:58:4d:f8:02:e7:eb:4c:db:3e:13:
87:93:8c:b3:10:20:b7:43:10:ea:a2:b3:3e:67:28:55:46:30:
b2:90:23:52:a5:81:28:93:a5:4b:c9:6b:f5:e3:9a:a0:53:ba:
9a:78:bc:f0:33:bd:43:4f:df:4b:32:c4:f1:8a:c3:c9:19:40:
18:6a:fd:dc:ac:25:6e:3f:15:76:fb:20:61:42:34:73:52:35:
6f:88:5b:0a:f9:41:a6:a7:e1:9e:c1:3f:71:ca:c0:5e:87:de:
3a:3f:9f:ce:25:99:07:88:c4:fa:a9:62:a4:00:7b:48:2a:8e:
e8:fc:69:e4:d3:3c:21:52:b9:38:09:ee:7a:32:80:e1:24:3b:
2b:2e:39:95:3e:0c:3a:90:80:f8:15:de:76:86:eb:99:7d:d8:
2e:41:d2:8b:8b:0e:e3:93:2b:e7:9b:ca:9a:7a:cd:3b:8b:00:
a5:8f:89:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:36 2026 by rpki-client